tyler
6ab52a2499
Backend & Auth: - Add @clerk/nextjs for production authentication - Create src/proxy.ts with clerkMiddleware() for route protection - Implement multi-tenant auth with role-based access control - Add Clerk components (Show, UserButton, SignInButton, SignUpButton) Billing & Payments: - Full Stripe integration (subscriptions, add-ons, customer portal) - Plan tiers: Starter 9/mo, Farm 49/mo, Enterprise 99/mo - Webhook handling for subscription events - createSubscription(), createAddonSubscription(), createCustomerPortalSession() API & Security: - Rate limiting with @upstash/ratelimit (100 req/min API, 20 req/min checkout) - Zod validation schemas for all endpoints (orders, products, campaigns, etc.) - Security headers (CSP, HSTS, X-Frame-Options) - API routes: /api/v1/ with validated, rate-limited endpoints Monitoring: - Sentry error tracking with performance monitoring - PostHog analytics for feature usage, funnels, cohorts - User activity logging and breadcrumb tracking Admin Features: - Analytics dashboard with revenue charts, customer growth, conversion funnel - Onboarding flow with 6-step interactive tour - Referral system with share tracking and reward redemption - Changelog feed with in-app notifications PWA & SEO: - Web app manifest with icons and shortcuts - Service worker for offline support and caching - Full SEO metadata, OpenGraph, Twitter cards - Structured data (JSON-LD) for organization and products Database: - Add referral_codes, changelogs, onboarding_progress tables - Add user_activity_logs, api_keys, notification_preferences - Comprehensive RLS policies for all new tables - Seed data for demo brands and products
49 lines
1.2 KiB
TypeScript
49 lines
1.2 KiB
TypeScript
// Clerk Middleware for Next.js App Router
|
|
// Must be exported as default from proxy.ts in src/ directory
|
|
|
|
import { clerkMiddleware } from "@clerk/nextjs/server";
|
|
|
|
// Define public routes that don't require authentication
|
|
const publicRoutes = [
|
|
"/",
|
|
"/login",
|
|
"/login2",
|
|
"/register",
|
|
"/forgot-password",
|
|
"/reset-password",
|
|
"/pricing",
|
|
"/terms-and-conditions",
|
|
"/privacy-policy",
|
|
"/contact",
|
|
"/api/health",
|
|
"/api/webhooks/clerk",
|
|
"/api/stripe/webhook",
|
|
// Brand storefronts are public
|
|
"/tuxedo",
|
|
"/tuxedo/*",
|
|
"/indian-river-direct",
|
|
"/indian-river-direct/*",
|
|
// Error pages
|
|
"/error",
|
|
"/not-found",
|
|
];
|
|
|
|
// Export the clerkMiddleware as the default export
|
|
export default clerkMiddleware({
|
|
// Public routes configuration
|
|
publicRoutes,
|
|
|
|
// Debug mode in development
|
|
debug: process.env.NODE_ENV === "development",
|
|
});
|
|
|
|
export const config = {
|
|
matcher: [
|
|
// Skip Next.js internals and all files in the _next directory
|
|
"/((?!_next|[^?]*\\.(?:html?|css|js(?!on)|jpe?g|webp|png|gif|svg|ttf|woff2?|ico|csv|docx?|xlsx?|zip|webmanifest)).*)",
|
|
// Always run for API routes
|
|
"/(api|trpc)(.*)",
|
|
// Include Clerk's auto-proxy path for authentication
|
|
"/__clerk/(.*)",
|
|
],
|
|
}; |